Well they can force CAs to not issue certificates either, which means unencrypted connections that the media conglomerates can ask ISPs to intercept, or having

Well they can force CAs to not issue certificates either, which means unencrypted connections that the media conglomerates can ask ISPs to intercept, or having to fall back on a web of trust model, which, unfortunately, hasn't really scaled so far.